Well... you are starting a NEW thread without saying as much in your subject
line;;; but, I'll answer anyway --- BUT the details will be left as an
exercise for the student.

Just write a menu program that (a) prevents escape to command-line, and (b)
invokes dsmc under the user's ID with the menu prompt for filespec -- as in
"dsmc restore %1"... the user can restore only files he has sufficient
rights to write/create.  Lots of shops have done this;  some do it to
prevent the TSM admin from doing anything else under root authority (sigh:()

Don France
Technical Architect -- Tivoli Certified Consultant
San Jose, Ca
(408) 257-3037
mailto:don_france AT att DOT net

Professional Association of Contract Employees
(P.A.C.E. -- www.pacepros.com)